Refactor Permission Management to a Middleware-Based Solution

[JackHaeg]

Overview

The current VRMS permission system (accessLevel) relies on hardcoded values / string matching checks (e.g., is_admin), which limits flexibility and maintainability. To enhance scalability and streamline permission management, permissions should be refactored into a middleware-based solution. This will allow for centralized handling and easier updates across the application.

Action Items

• Research approaches for refactoring the current permission system into a middleware-based solution.
  • Ensure that the new implementation supports upcoming User Permission Search features, which are set to be merged in #1737.
• Design and document middleware architecture, including:
  • Permission validation workflows.
  • Integration points with existing authentication mechanisms.
• Create diagrams outlining the proposed middleware solution to illustrate system interactions and permission handling.

Resources/Instructions

• Review the related issue that uncovered this problem: Fix Super Admin User Login issue #1802.
• Ensure alignment with existing authentication and authorization best practices.

[JackHaeg]

@ntrehan Here is the draft of the research issue we discussed in our last team call re: refactoring a middleware-based solution for VRMS permissions. Please feel free to edit this issue as you see fit and reach out if you have any questions!

[JackHaeg]

Hi @ntrehan! When you have a moment, can you please provide an update with the following information:

1. Progress: "What is the current status of your project? What have you completed and what is left to do?"
2. Blockers: "Difficulties or errors encountered."
3. Availability: "How much time will you have this week to work on this issue?"
4. ETA: "When do you expect this issue to be completed?"
5. Pictures or links* (if necessary): "Add any pictures or links that will help illustrate what you are working on."

• remember to add links to the top of the issue if they are going to be needed again.